Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6638303a3a2f34342d3438203d3e203533363637.roa
File: 326131343a373538313a6638303a3a2f34342d3438203d3e203533363637.roa (raw, json)
Hash identifier: tuh7K1GQieGACr464PZpPWPLZ8hyL3j/wde1BU6/QyA=
Subject key identifier: AC:9A:E0:AE:CE:D9:EE:54:05:49:05:2B:5E:1A:40:84:3E:00:E3:7D
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 31C6D9EA0CF9D14D7F6308C323B4ACF2027F0ECE
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6638303a3a2f34342d3438203d3e203533363637.roa
Signing time: Tue 13 Aug 2024 23:13:18 +0000
ROA not before: Tue 13 Aug 2024 23:08:18 +0000
ROA not after: Tue 12 Aug 2025 23:13:18 +0000
asID: 53667
IP address blocks: 2a14:7581:f80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:c6:d9:ea:0c:f9:d1:4d:7f:63:08:c3:23:b4:ac:f2:02:7f:0e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 13 23:08:18 2024 GMT
Not After : Aug 12 23:13:18 2025 GMT
Subject: CN=AC9AE0AECED9EE540549052B5E1A40843E00E37D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:27:6d:ff:20:0c:53:f1:74:a1:06:17:2f:
b0:71:64:9e:54:7c:54:f6:20:04:67:b7:71:86:e0:
71:f4:96:3e:b2:62:94:ae:10:94:07:b7:d6:d2:4c:
c3:61:44:7f:7e:5d:70:22:7e:5b:a4:b4:eb:7c:3f:
2d:25:88:09:fc:d7:3e:4b:ac:dd:f3:03:95:ad:4b:
69:00:65:ea:9a:51:d6:93:8c:bd:a1:04:4d:eb:63:
75:3b:64:88:12:46:60:54:a2:90:04:47:02:7f:67:
49:fe:95:e6:1c:15:80:ef:c9:05:a9:2c:d4:8a:68:
b4:39:7d:90:9f:7c:36:dc:ee:a4:04:72:10:f3:5e:
ca:1f:a4:69:92:cc:d7:7d:d1:9c:f5:0a:d0:31:be:
f2:47:c0:59:04:69:1b:fa:57:08:25:5c:2f:2e:2a:
2f:79:a8:8b:79:45:1b:b4:7f:b0:16:0a:09:de:14:
a7:bc:af:29:d3:2c:83:fc:01:a5:b8:f3:76:dd:57:
d1:36:76:d1:fe:89:22:d0:a5:c2:53:c0:d0:86:8e:
b5:11:c9:92:24:38:a9:bc:aa:70:05:76:94:42:e7:
55:fe:c6:9f:e6:c4:65:8e:4c:8c:d8:5b:38:5c:b8:
da:77:79:1a:8a:f1:2e:6f:e9:4d:a9:a4:1b:f6:f7:
d1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9A:E0:AE:CE:D9:EE:54:05:49:05:2B:5E:1A:40:84:3E:00:E3:7D
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6638303a3a2f34342d3438203d3e203533363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:f80::/44
Signature Algorithm: sha256WithRSAEncryption
30:3d:65:23:a3:91:d6:2f:ee:5f:e5:91:97:5b:9b:61:e8:be:
93:65:a6:c5:97:b8:97:68:29:a4:c0:19:a4:57:76:cb:7c:13:
5f:e5:0e:e7:7f:54:63:a4:ae:a8:cc:6b:23:69:05:8c:29:99:
5b:b9:f9:4e:fd:e8:95:45:a7:49:28:08:9d:ea:7a:31:ad:af:
c6:16:81:76:14:b3:9f:4e:35:47:95:6b:b6:ba:18:c0:6c:d2:
c6:8f:13:b1:2e:59:10:39:73:ea:9e:92:14:22:c8:76:92:2e:
54:3c:77:11:cb:79:8b:84:33:9f:92:1b:86:88:f3:53:b3:7b:
1f:9f:cd:de:14:05:c3:e9:37:c5:76:fa:f5:c5:1b:f3:ca:c8:
a6:8b:4d:91:94:3b:37:76:db:58:30:b2:2b:7d:12:a3:8d:fe:
8d:42:71:91:e6:bd:67:a4:9c:00:8a:79:2c:60:f9:40:48:53:
7f:29:26:0e:45:70:27:29:b2:e0:70:67:c5:4a:4f:30:db:5e:
a7:de:9e:56:41:19:54:92:3c:e7:ed:b1:47:b5:e0:74:68:da:
f7:54:f0:74:69:af:be:9b:6f:68:d2:e8:e3:25:c7:f3:c6:f5:
fb:dd:57:0f:41:8d:01:fd:51:d9:f7:6e:59:a4:d7:d0:c7:4c:
81:3e:f5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:20 2024 by rpki-client on console-ams.rpki-client.org